Search: “Wireshark”

5 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 70 Vulnerability 34 Tools 14 Ransomware 14 Exploit / PoC 12 Threat actor 10 Policy & legal 7 Industry 4 Data breach 4 AI safety & security 3 Research 2 AI tools & infra 1 Advisory 1 Phishing & fraud 1

SeverityAll critical 37 high 40 medium 71 low 26 info 3

Frankenstein campaign: threat actors put together open

Security AffairsJun 8, 18:23 UTC · Jun 8, 2019Threat actor CVE-2017-11882

Russia-Aligned Hackers Use GuardBreaker Prompt Injection to Disrupt AI Malware Analysis

Russia-aligned group UAC-0099 embeds GuardBreaker prompt injection in a VBScript comment to make AI malware scanners refuse analysis of a MATCHBOIL loader.

ESET identified a UAC-0099 VBScript used in an early-stage intrusion against a target in Ukraine that hides a safety-triggering comment (a question about building a nuclear weapon) intended to make AI code scanners refuse to continue analysis. The script downloads MATCHBOIL, a loader associated exclusively with UAC-0099, alongside familiar anti-analysis checks for IDA and Wireshark. The technique turns the AI triage process itself into the attack target, risking missed detections or benign misclassification of malicious samples.

Cyber Security NewsSep 11, 14:32 UTC · 6d agoThreat actor in the wild

Search: “Wireshark”

Frankenstein campaign: threat actors put together open

Russia-Aligned Hackers Use GuardBreaker Prompt Injection to Disrupt AI Malware Analysis

SMOKE#SCREEN Campaign Abuses ScreenConnect to Give Attackers Remote Control Access

Threat actors using MacroPack to deploy Brute Ratel, Havoc and PhantomCore payloads

New Threat Actor Group DarkHydrus Targets Middle East Government